CVE-2012-4974 Information

Description

Layton Helpbox 4.4.0 allows remote authenticated users to change the login context and gain privileges via a modified (1) loggedinenduser (2) loggedinendusername (3) loggedinuserusergroup (4) loggedinuser or (5) loggedinusername cookie.

Reference

http://www.reactionpenetrationtesting.co.uk/helpbox-login-bypass.html